Method and apparatus for operating a vehicle, in particular a railroad vehicle

ABSTRACT

A method for operating a vehicle, in particular a railroad vehicle, having a safety circuit to be actuated by a vehicle driver, the safety circuit initiating at least one emergency action if the vehicle driver actuates the safety circuit uninterruptedly, or not at all, in a predefinable time interval. Provision is made here that a condition of the vehicle driver is sensed by a camera device; and that the at least one emergency action is initiated depending on the condition of the vehicle driver.

RELATED APPLICATION INFORMATION

The present application claims priority to and the benefit of Germanpatent application no. 10 2014 215 461.8, which was filed in Germany onAug. 5, 2014, the disclosure of which is incorporated herein byreference.

FIELD OF THE INVENTION

The present invention relates to a method for operating a vehicle, inparticular a railroad vehicle, that has a safety circuit to be actuatedby a vehicle driver, the safety circuit initiating at least oneemergency action if the vehicle driver actuates the safety circuituninterruptedly, or not at all, in a predefinable time interval. Alsodescribed is an apparatus, in particular a control device, for operatinga vehicle, in particular a railroad vehicle, having a safety circuit tobe actuated by a vehicle driver of the vehicle, which circuit isconfigured to initiate at least one emergency action if it has beenactuated by the vehicle driver uninterruptedly, or not at all, within apredefinable time interval.

BACKGROUND INFORMATION

Methods and apparatuses of the kind recited above are known from theexisting art. Safety circuits are used as a rule in railroad vehicles.The vehicle driver continuously actuates a button or a pedal of thesafety circuit, said actuation being monitored by the safety circuit.Within a predefinable time period, as a rule 30 seconds, the operatingelement must be briefly released once or at least otherwise actuated,for example with an elevated or decreased actuation force, in order tosignal that the vehicle driver, for example, is still awake. Also knownare opposite methods in which the vehicle driver must actuate the safetycircuit or the operating element once during the time interval in orderto avoid initiation of an emergency action. If that activity is absent,i.e. if the operating element is actuated uninterruptedly or not at allwithin the predefinable time interval, the safety circuit then triggersat least one emergency action. An “uninterrupted actuation” isunderstood in this instance also as a modification-free actuation, aswas described above with reference to constant actuation force. Thewarning can be, in known fashion, an optical or acoustic warning. If thewarning is ignored by the driver, i.e. if the operating elementcontinues not to be released, the safety circuit recognizes from thisthat the vehicle driver is no longer functionally capable and initiatesan emergency braking operation in order to bring the vehicle to a stop.Safety circuits of this kind are also known as a “dead-man's switch.”

SUMMARY OF THE INVENTION

The method according to the present invention having the featuresdescribed herein has the advantage that operation of the safety circuitby the vehicle driver is plausibilized by an additional system. Theresult is to ensure on the one hand that the emergency action isjustifiably initiated, and on the other hand that an emergency action isinitiated, if applicable, sooner than hitherto, when it is recognizedthat the vehicle driver is not functionally capable. Provision is madefor this purpose, according to the present invention, that a conditionof the vehicle driver is sensed by way of a camera device; and that theat least one emergency action is initiated depending on the sensedcondition of the vehicle driver. The actuation of the safety circuit isthus plausibilized by sensing the condition of the driver. Inparticular, if the camera device senses that the vehicle driver isfunctionally incapable, for example because the camera device cannotsense the vehicle driver at all, for example because he has left theoperator's cabin, the emergency action is initiated immediately. Thecamera device is configured in particular to sense the driver's faceand, by face recognition, to detect and optionally evaluate reactions ofthe driver. Carrying out face recognition using a camera device is knownin principle from the existing art, so that this need not be discussedhere in further detail. Face recognition allows the identification ofreactions by the driver that allow inferences as to the vehicle driver'scondition.

Provision may be made that an optical and/or acoustic warning isoutputted as an emergency action if the safety circuit is actuateduninterruptedly, or not at all, in the predefinable time period. Theoptical or acoustic warning informs the vehicle driver that he or shehas actuated the safety circuit uninterruptedly during the predefinabletime period. The vehicle driver is thereby reminded that he or she must,for example, interrupt actuation of the safety circuit in order todemonstrate his or her functional capability. It is also conceivable toinitiate/output a haptic warning as an emergency action. This firstemergency action offers the possibility that, for example, theuninterrupted actuation involves an unintentional and in particularinattentive uninterrupted actuation of the safety circuit, even thoughthe vehicle driver is functionally capable. If the vehicle driver thenactuates the safety circuit, in particular within a second predefinableinterval that begins upon output of the warning, the driver's functionalcapability is then recognized and the safety circuit is shifted into itsinitial state.

According to an advantageous refinement of the invention, provision ismade that the vehicle driver is monitored by the camera device withregard to a reaction to the outputted warning. Outputting of the opticalor acoustic warning, constituting a first emergency action, should causethe vehicle driver, if he or she is functionally capable, to recognizethe warning and react thereto, possibly unconsciously, with a change inhis or her facial features. This reaction is sensed by the cameradevice. If the vehicle driver therefore does react to the outputtedwarning, it is inferred therefrom that the vehicle driver is inprinciple functionally capable. If no reaction is sensed by the cameradevice, it is then inferred that the vehicle driver is functionallyincapable.

Provision furthermore may be made that a further emergency action isinitiated after a predefinable time following output of the opticaland/or acoustic warning, the time being predefined depending on thereaction of the vehicle driver to the outputted warning. The resultthereby achieved is that the driver is again reminded regarding correctactuation of the safety circuit in order to determine his or herfunctional capability. The further warning is outputted earlier or laterdepending on the condition of the vehicle driver. If it is haspreviously been ascertained by way of the camera device that the driverhas not reacted to the outputted warning, the further emergency actionis initiated earlier than in the case in which a reaction of the driverto the outputted warning was sensed. Because the further emergencyaction is outputted earlier if the driver has not reacted to thepreviously outputted warning, the method is shortened overall ascompared with a conventional method with output of a second warning, sothat a functional incapability of the vehicle driver can be reacted tomore quickly.

Provision is made for this purpose, in particular, that the predefinedtime is predefined to be shorter if no reaction by the vehicle driver tothe outputted warning has been ascertained by the camera device, andlonger if a reaction by the vehicle driver has been sensed. Theadvantages already recited result therefrom.

According to an advantageous refinement, provision is made thatdepending on the reaction of the vehicle driver, the safety circuitinitiates an emergency braking operation as a further emergency action.Provision is made in particular that the emergency braking operation isinitiated when it has been determined that the vehicle driver has notreacted to the outputted warning.

Alternatively, provision may be made that depending on the reaction ofthe vehicle driver, the safety circuit outputs a further acoustic and/oroptical warning as a further emergency action. The vehicle driver isthereby once again reminded to operate the safety circuit. Initiation ofan emergency braking operation can thereby be delayed, and undesiredinitiation of an emergency braking operation can be prevented. This isprovided in particular when a vehicle speed of the vehicle which permitsdelayed initiation of an emergency braking operation is sensed.Provision may be made for this purpose that depending on the reaction ofthe vehicle driver and the present vehicle speed of the vehicle, thesafety circuit outputs as a further emergency action either theemergency braking operation or the further acoustic and/or opticalwarning. If a limit speed value is exceeded, the emergency brakingoperation is then initiated immediately as a further emergency action,in order to increase safety overall.

Provision furthermore may be made that the vehicle driver is monitoredby the camera device with regard to a further reaction to the furtheroutputted warning; and that the emergency braking operation is initiateddepending on the further reaction. Provision is therefore made here thatthe emergency braking operation is initiated only if there is also noreaction by the driver to the further acoustic or optical warning.

The apparatus according to the present invention having the featuresdescribed herein is notable for the fact that a camera device isprovided which is configured to sense a condition of the vehicle driver,the safety circuit triggering the at least one emergency actiondepending on the sensed condition of the vehicle driver. Furtherfeatures and advantages are evident from what has already been describedabove, and from the descriptions herein.

The present invention will be explained in further detail below withreference to an exemplifying embodiment.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 shows an apparatus for operating a railroad vehicle.

FIG. 2 is a flow chart showing a method for operating the vehicle by wayof the apparatus.

DETAILED DESCRIPTION

FIG. 1 is a simplified depiction of a vehicle 1 that is configured as arailroad vehicle. Vehicle 1 has a vehicle driver's cabin 2 in which avehicle driver 3 can operate vehicle 1. A corresponding operating device4 having multiple operating elements, as well as a vehicle driver's seat5 for a vehicle driver, are provided for this purpose in vehicledriver's cabin 2.

Vehicle 1 furthermore has an apparatus 6 that is provided as adead-man's switch in order to monitor the functional capability ofvehicle driver 3. Apparatus 6 has for this purpose a safety circuit 7having an operating element 8, operating element 8 being configured inthe present case as a foot pedal. Alternatively, provision can also bemade to embody operating element 8 as a manual switch, in particular asa pushbutton.

Apparatus 6 furthermore has a camera device 9 that is configured andconfigured in such a way that it senses vehicle driver 3, in particularhis or her face. By face recognition, camera device 9 senses thecondition of the vehicle driver, in particular in the form of reactionsby the vehicle driver that result from a change in the facial featuresof the face and/or in the head position of vehicle driver 3.

The manner of operation of apparatus 6 will now be explained in furtherdetail by way of FIG. 2, referring to a flow chart.

As already mentioned, apparatus 6 monitors the functional capability ofvehicle driver 3. Firstly, the actuation of operating element 8 byvehicle driver 3 is monitored. Safety circuit 7 detects the functionalcapability of the vehicle driver when the vehicle driver interruptsactuation of operating element 8 at least once within a predefinabletime period. A time interval of 30 seconds may be established as apredefinable time interval. If the vehicle driver interrupts theactuation of operating element 8 or of safety circuit 7 within this timeinterval, it is recognized on that basis that the vehicle driver isfunctionally capable.

If it is sensed in step S1, however, that the driver is actuatingoperating element 8 uninterruptedly, or not at all, in the predefinedtime interval, then in a following step S2 an optical warning isoutputted by safety circuit 7, for example by way of a light-emittingarrangement 10 provided on operating device 4.

Subsequently thereto, camera device 9 monitors the condition of thevehicle driver in a step S3. A face recognition operation is carried outin order to sense reactions by vehicle driver 3.

If the result of the monitoring of the vehicle driver in step S3 is thatvehicle driver 3 is attentive and, in particular, has registered theoptical warning, then in a step S4.1 an acoustic warning is outputtedafter a predefined time has elapsed. If camera device 9 detects by facerecognition that the vehicle driver is inattentive, for example becausehe or she does not react to the optical warning, or reacts to theoptical warning but without interrupting or modifying the operation ofoperating element 8, the acoustic warning is then outputted in a stepS4.2 at a point in time before the point in time of the acoustic warningof step S4.1, so that the vehicle driver's attention is drawn, at anearlier point in time, to his or her inattentiveness or to the actuationof safety circuit 7.

If it is determined by way of the condition monitoring using cameradevice 9 that the driver is functionally incapable, for example becausehe or she does not react at all to the optical warning of step S2, anemergency braking operation of vehicle 1 is then initiated in a stepS4.3. The result is that thanks to the monitoring of the driver'scondition using camera device 9, initiation of the emergency brakingoperation can occur sooner than in the case of existing dead-man'sswitches.

If vehicle driver 3 does not react to the acoustic warning of step S4.1or S4.2, and if it is ascertained by way of camera device 9 that thevehicle driver is functionally incapable, for example because he or shehas not reacted either to the optical warning or to the acousticwarning, another acoustic warning is then triggered in a step S5.1before an emergency braking operation is triggered in a step S5.2 if thevehicle driver also does not react to the repeated acoustic warning instep S5.1, or in steps S4.1 or S4.2.

If a reaction by the vehicle driver to the repeated acoustic warning instep S5.1 is detected, however, and in particular is correspondinglyverified by an actuation of operating element 8 by a vehicle driver,then normal operation of apparatus 6 and of vehicle 1 is resumed in astep S6.

The suppression or delaying of emergency braking as a result ofoutputting a further warning in steps S4.1, S4.2, or S5.1 is to beunderstood as optional. The method can be accomplished in principlewithout the output of an additional or repeated acoustic or opticalwarning. Known methods for face recognition can be utilized inevaluating the image of vehicle driver 3 acquired by camera device 9. Inparticular, a reaction by the vehicle driver is identified on the basisof the position and orientation of the face. The condition of thevehicle driver can be recognized on the basis of these data. Inparticular, it is possible to infer, for example, that the vehicledriver is inattentive if he or she is not looking in the direction oftravel or if his or her face is not oriented in the direction of travel.Optionally, the orientation of the vehicle driver's eyes can also bemonitored, and the vehicle driver's attentiveness can be inferred fromthe orientation of his or her eyes. Corresponding face recognitionmethods are also used, for example, in motor vehicles in order to sensea fatigue condition of the motor vehicle driver.

Camera device 9 can be made up of a camera or of multiple cameras. Inparticular, a stereoscopic camera device having two cameras offers thepossibility of carrying out a three-dimensional determination of thehead position, and thereby achieving greater accuracy in ascertainingthe vehicle driver's condition. It is also conceivable to disposemultiple camera devices in distributed fashion in vehicle driver's cabin2, the corresponding parameters or head position data then beingcalculated in combination from the images acquired thereby.

The utilization of apparatus 3, and the execution of the methoddescribed, are not limited to rail vehicles or railroad vehicles.Apparatus 6 and the method described can also be used in other types ofvehicle, for example maritime vessels or motor vehicles. It is alsoconceivable to output haptic warnings or warning messages.

What is claimed is:
 1. A method for operating a vehicle, having a safetycircuit to be actuated by a vehicle driver, the method comprising:initiating, via the safety circuit, at least one emergency action if thevehicle driver actuates the safety circuit uninterruptedly, or not atall, in a predefinable time interval; wherein a condition of the vehicledriver is sensed by a camera device, and wherein the at least oneemergency action is initiated depending on the condition of the vehicledriver.
 2. The method of claim 1, wherein at least one of an opticalwarning and an acoustic warning is outputted as an emergency action ifthe safety circuit is actuated uninterruptedly, or not at all, in thepredefinable time period.
 3. The method of claim 1, wherein the vehicledriver is monitored by the camera device with regard to a reaction tothe outputted warning.
 4. The method of claim 1, wherein a furtheremergency action is initiated after a predefinable time following outputof the warning, the time being predefined depending on the reaction ofthe vehicle driver to the outputted warning.
 5. The method of claim 1,wherein the predefined time is predefined to be shorter if no reactionby the vehicle driver to the outputted warning has been ascertained bythe camera device, and longer if a reaction by the vehicle driver hasbeen sensed.
 6. The method of claim 1, wherein depending on the reactionof the vehicle driver, the safety circuit initiates an emergency brakingoperation as a further emergency action.
 7. The method of claim 1,wherein depending on the reaction of the vehicle driver, the safetycircuit outputs at least one of a further optical warning and a furtheracoustic warning as a further emergency action.
 8. The method of claim1, wherein the vehicle driver is monitored by the camera device withregard to a further reaction to the further warning, and wherein theemergency braking operation is initiated depending on the furtherreaction.
 9. The method of claim 1, wherein a face recognition operationis carried out to sense a reaction of the vehicle driver.
 10. The methodof claim 1, wherein the vehicle is a railroad vehicle.
 11. An apparatusfor operating a vehicle, comprising: a safety circuit to be actuated bya vehicle driver of the vehicle, which safety circuit is configured toinitiate at least one emergency action if it has been actuated by thevehicle driver uninterruptedly, or not at all, within a predefinabletime interval; and a camera device to sense a condition of the vehicledriver; wherein the safety circuit is configured to trigger theemergency action depending on the sensed condition of the vehicledriver.
 12. The apparatus of claim 11, wherein the vehicle is a railroadvehicle.